Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Network Analysis - SSL Strip Clear-text Credentials
Mission
An SSL Strip attack downgraded HTTPS to HTTP, so the victim's credentials traveled in clear text and were captured. Download the packet capture (traffic.pcap), analyze the clear-text HTTP POSTs, and extract the login password (the flag).
Not started
Hints
Hint 1Show
SSL Strip downgraded HTTPS to HTTP, so credentials traveled in clear text
Hint 2Show
Inspect each POST body (http.request.method == POST); newsletter/search are decoys
Hint 3Show
The password field in the POST /login body is the flag